diff options
| author | Kurt Roeckx <kurt@roeckx.be> | 2015-03-04 21:57:52 +0100 |
|---|---|---|
| committer | Kurt Roeckx <kurt@roeckx.be> | 2015-03-07 23:02:19 +0100 |
| commit | f417997a324037025be61737288e40e171a8218c (patch) | |
| tree | 2fcd8f72e9ef92a1461a45a3e436f181ad4897ff /ssl/ssl.h | |
| parent | 6ee3997134e2adfaaaa62ca685681a773d2a7d9c (diff) | |
Remove export ciphers from the DEFAULT cipher list
They are moved to the COMPLEMENTOFDEFAULT instead.
This also fixes SSLv2 to be part of COMPLEMENTOFDEFAULT.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'ssl/ssl.h')
| -rw-r--r-- | ssl/ssl.h | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -338,7 +338,7 @@ extern "C" { * The following cipher list is used by default. It also is substituted when * an application-defined cipher list string starts with 'DEFAULT'. */ -# define SSL_DEFAULT_CIPHER_LIST "ALL:!aNULL:!eNULL:!SSLv2" +# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!aNULL:!eNULL:!SSLv2" /* * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always * starts with a reasonable order, and all we have to do for DEFAULT is |